pin snakeyaml to 1.33 (#14960)

Co-authored-by: Mashhur Sattorov <mashhur.sattorov@elastic.co>

build.gradle

@@ -25,7 +25,7 @@ buildscript {
         }
     }
     dependencies {
-        classpath 'org.yaml:snakeyaml:1.29'
+        classpath 'org.yaml:snakeyaml:1.33'
     }
 }
 

logstash-core/benchmarks/build.gradle

@@ -36,7 +36,7 @@ buildscript {
     gradlePluginPortal()
   }
   dependencies {
-    classpath 'org.yaml:snakeyaml:1.29'
+    classpath 'org.yaml:snakeyaml:1.33'
     classpath 'gradle.plugin.com.github.jengelman.gradle.plugins:shadow:7.0.0'
   }
 }

logstash-core/build.gradle

@@ -41,7 +41,7 @@ buildscript {
         mavenCentral()
     }
     dependencies {
-        classpath 'org.yaml:snakeyaml:1.29'
+        classpath 'org.yaml:snakeyaml:1.33'
     }
 }
 
@@ -182,6 +182,8 @@ dependencies {
     } else {
         api files(customJRubyDir + "/maven/jruby-complete/target/jruby-complete-${customJRubyVersion}.jar")
     }
+    // pin version of jackson-dataformat-yaml's transitive dependency "snakeyaml"
+    implementation "org.yaml:snakeyaml:1.33"
     implementation group: 'com.google.guava', name: 'guava', version: '24.1.1-jre'
     // WARNING: DO NOT UPGRADE "google-java-format"
     // later versions require GPL licensed code in javac-shaded that is

rubyUtils.gradle

@@ -23,7 +23,7 @@ buildscript {
         mavenCentral()
     }
     dependencies {
-        classpath 'org.yaml:snakeyaml:1.29'
+        classpath 'org.yaml:snakeyaml:1.33'
         classpath "de.undercouch:gradle-download-task:4.0.4"
         classpath "org.jruby:jruby-complete:9.2.20.1"
     }

tools/benchmark-cli/build.gradle

@@ -37,7 +37,7 @@ buildscript {
     gradlePluginPortal()
   }
   dependencies {
-    classpath 'org.yaml:snakeyaml:1.29'
+    classpath 'org.yaml:snakeyaml:1.33'
     classpath 'gradle.plugin.com.github.jengelman.gradle.plugins:shadow:7.0.0'
   }
 }

tools/dependencies-report/build.gradle

@@ -36,7 +36,7 @@ buildscript {
     gradlePluginPortal()
   }
   dependencies {
-    classpath 'org.yaml:snakeyaml:1.29'
+    classpath 'org.yaml:snakeyaml:1.33'
     classpath 'gradle.plugin.com.github.jengelman.gradle.plugins:shadow:7.0.0'
   }
 }

tools/dependencies-report/src/main/resources/licenseMapping.csv

@@ -126,6 +126,7 @@ dependency,dependencyUrl,licenseOverride,copyright,sourceURL
 "org.jruby:jruby-complete:",http://jruby.org/,EPL-2.0
 "org.reflections:reflections:",https://github.com/ronmamo/reflections,BSD-2-Clause
 "org.slf4j:slf4j-api:",http://www.slf4j.org/,MIT
+"org.yaml:snakeyaml:",https://bitbucket.org/snakeyaml/snakeyaml/src/master/,Apache-2.0
 "paquet:",https://github.com/elastic/logstash,Apache-2.0
 "pleaserun:",https://github.com/jordansissel/pleaserun,Apache-2.0
 "polyglot:",http://github.com/cjheath/polyglot,MIT

tools/dependencies-report/src/main/resources/notices/org.yaml!snakeyaml-NOTICE.txt

@@ -0,0 +1,11 @@
+Copyright (c) 2008, SnakeYAML
+
+Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
+in compliance with the License. You may obtain a copy of the License at
+
+http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software distributed under the License
+is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express
+or implied. See the License for the specific language governing permissions and limitations under
+the License.

tools/ingest-converter/build.gradle

@@ -35,7 +35,7 @@ buildscript {
     gradlePluginPortal()
   }
   dependencies {
-    classpath 'org.yaml:snakeyaml:1.29'
+    classpath 'org.yaml:snakeyaml:1.33'
     classpath 'gradle.plugin.com.github.jengelman.gradle.plugins:shadow:7.0.0'
   }
 }